Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
File: 85151a34-1ac3-4b9b-801b-33bd153ac88d.roa (raw, json)
Hash identifier: 5DAOD55VIMfG23wXKIcP9C+K4BZerC1uJw7NeHfdj/g=
Subject key identifier: DA:BA:5A:12:D1:7A:79:85:F7:27:E5:92:96:52:03:18:45:95:74:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F108602DB6045E7AEEA2641AFED0178CD380707
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:10:86:02:db:60:45:e7:ae:ea:26:41:af:ed:01:78:cd:38:07:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=264f1664ce2c4bf1fcdbebf6f8e455614d1656b0469bfe4c23424edf9584f03c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:55:c7:5d:f6:5a:2d:0d:0d:bf:41:12:71:
60:b2:af:30:f8:ef:63:32:81:ca:a8:01:cb:69:87:
1c:2a:23:0d:08:00:8c:c9:de:cd:9b:ab:ef:b8:60:
08:19:d2:f0:03:5c:83:88:f9:ba:c5:12:60:2f:bc:
07:71:af:2b:a8:82:c0:fa:eb:12:82:d2:a2:96:a6:
63:80:40:fe:09:bb:17:bc:c1:ae:07:2c:58:d2:a5:
9c:f6:d8:fe:fd:21:63:ed:1c:2a:42:52:6a:e1:a5:
45:a1:b3:b8:73:ad:a8:2d:c0:04:1b:a8:87:a8:4b:
32:8e:d1:ad:5f:fc:66:c2:9a:e5:ac:a2:c9:27:09:
7f:cb:f0:25:03:82:a7:9c:54:06:0c:1c:ad:18:c9:
50:89:ac:9d:a0:7e:08:df:87:bf:77:8d:bc:99:49:
98:94:59:33:d6:6a:2b:bd:cf:ac:49:a7:06:c3:c6:
c8:ab:09:36:62:a4:b8:64:84:e3:1a:14:c7:e5:8b:
21:23:9b:60:90:37:6f:fa:20:35:9e:31:3a:69:77:
00:1a:dd:41:47:b8:37:fa:c7:e0:30:53:c4:8b:df:
f3:fe:d0:bd:bc:31:06:93:bf:3d:df:f8:0e:5d:dd:
b4:0c:ca:e3:63:1e:95:bf:2f:d1:ed:01:2d:12:21:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BA:5A:12:D1:7A:79:85:F7:27:E5:92:96:52:03:18:45:95:74:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:1000::/40
Signature Algorithm: sha256WithRSAEncryption
00:b7:f0:aa:50:25:95:57:cc:92:31:3c:e6:05:69:3a:17:30:
37:b7:dd:3e:1a:1c:da:5f:21:28:2c:0f:c8:1e:87:6f:90:00:
df:60:f5:dd:77:84:ac:69:bf:89:42:1a:93:ba:6b:fc:cb:de:
2c:d7:07:49:35:31:cb:8b:67:5b:3a:d5:dc:7f:55:f2:73:da:
ce:c7:5a:45:04:c8:76:5b:2b:e2:d3:00:11:17:8b:77:32:fb:
93:af:79:09:9f:cb:0e:2c:86:2d:7e:b6:44:da:f6:ad:b1:b3:
39:09:0c:8c:0c:3b:6c:54:23:74:93:b1:74:73:9d:ff:ec:7b:
9c:b2:01:4d:02:00:63:23:5b:12:cc:d5:41:43:63:87:95:ad:
ba:81:2a:f7:db:ac:6e:96:7e:98:20:35:f6:19:c1:8c:57:56:
1c:65:04:51:51:3b:31:58:84:e1:2e:75:9b:34:5d:5e:9f:c9:
b3:72:db:83:52:e3:dc:15:76:16:fd:bb:35:34:d6:d3:3f:b4:
6f:d7:24:10:05:4c:f4:3d:e8:6d:03:d4:dd:bf:4f:4e:51:35:
dd:3f:ec:9c:d8:f5:b0:a5:e2:a9:5c:09:c7:55:32:d9:a1:f3:
32:10:e8:c7:8f:83:34:14:e3:a2:e0:8a:bc:f5:1c:c8:ac:04:
03:b2:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:57 2025 by rpki-client